ABC (computer virus)


ABC (computer virus)

Computer virus
Fullname = ABC
Common name = ABC
Technical name = ABC
Family = N/A
Aliases = ABC-2378, ABC.2378, ABC.2905, with variants ABC-2918, ABC-2918B
Classification = Virus
Type = DOS
Subtype = COM and EXE corrupter, other nuisance behaviors
IsolationDate = 1992
Isolation = Unknown
Origin = USSR
Author = Unknown

ABC, discovered in October 1992, is a memory-resident, file-infecting computer virus which infects EXE files and may alter both COM and EXE files. ABC activates on the 13th day of every month.

Upon infection, ABC becomes memory-resident at the top of system memory but below the 640K DOS boundary and hooks interrupts 16 and 1C. The copy of command.com pointed to by the COMSPEC environment variable may also be altered. ABC infects/alters COM and EXE files as they are executed.

After infection, total system memory, as measured by the DOS CHKDSK program, will not be altered, but available free memory will have decreased by approximately 8,960 bytes. Altered, but not infected, COM or EXE files will have 4 to 30 bytes added to their length. Infected EXE files (COM files are never infected) have a file length increase of 2,952 to 2,972 bytes, and ABC is located at the end of the infected EXE. An altered/infected file's date and time in the DOS disk directory listing may have been updated to the current system date and time when the file was altered/infected.

No text strings are visible within the viral code in infected EXE files, but the following text strings are encrypted within the initial copy of the ABC virus:

:ABC_FFEA:Minsk 8.01.92:ABC

ABC causes keystrokes on the compromised machine to be repeated. It seems double-letter combinations trigger this behavior, e.g. "book" becomes "sic|boook". System hangs may also occur when some programs are executed, a likely side-effect of ABC-induced corruption.

The ABC virus is not to be confused with the ABC keylogger trojan, written in 2004 by Jan ten Hove. Articles relating to the ABC keylogger trojan can be found [http://www.auditmypc.com/process/keylogger.asp here] and [http://securityresponse.symantec.com/avcenter/venc/data/spyware.abckeylogger.html here] .

External links

* [http://www.probertencyclopaedia.com/L2.HTM Computer Viruses (A)] , by Probert Encyclopedia
* [http://vil.nai.com/vil/content/v_98135.htm ABC] , by McAfee
* [http://securityresponse.symantec.com/avcenter/venc/data/abc.html Symantec Security Response - ABC] , by Symantec


Wikimedia Foundation. 2010.

Look at other dictionaries:

  • Virus (informatique) — Virus informatique  Pour l’article homonyme, voir Le Virus informatique.  Cet article fait partie de la série Programmes malveillants …   Wikipédia en Français

  • computer — computerlike, adj. /keuhm pyooh teuhr/, n. 1. Also called processor. an electronic device designed to accept data, perform prescribed mathematical and logical operations at high speed, and display the results of these operations. Cf. analog… …   Universalium

  • Alerte au virus — Virus informatique  Pour l’article homonyme, voir Le Virus informatique.  Cet article fait partie de la série Programmes malveillants …   Wikipédia en Français

  • Zombie (computer science) — This article is about the computing term. For the Irish electro band, see Zombie Computer (Band). Zombie virus redirects here. For the use of the term in science fiction, see Zombie apocalypse. In computer science, a zombie is a computer… …   Wikipedia

  • Zotob (computer worm) — The Zotob worm and several variations of it, known as Rbot.cbq, SDBot.bzh and Zotob.d, infected computers at companies such as ABC, CNN, The Associated Press, The New York Times, and Caterpillar Inc. mdash; Business Week, August 16, 2005.Zotob is …   Wikipedia

  • David Perry (computer specialist) — David Perry of Trend Micro David Perry is the Global Director of Education for Trend Micro, a computer antivirus software company.[1] He represents Trend Micro at industry, government, customer and reseller events worldwide. Long considered a… …   Wikipedia

  • Virologie informatique — Virus informatique  Pour l’article homonyme, voir Le Virus informatique.  Cet article fait partie de la série Programmes malveillants …   Wikipédia en Français

  • ReBoot — For other uses, see Reboot (disambiguation). ReBoot Genre Action Adventure Science fiction Format CGI Anima …   Wikipedia

  • Computers and Information Systems — ▪ 2009 Introduction Smartphone: The New Computer.       The market for the smartphone in reality a handheld computer for Web browsing, e mail, music, and video that was integrated with a cellular telephone continued to grow in 2008. According to… …   Universalium

  • List of Internet phenomena — This is a list of phenomena specific to the Internet, such as popular themes and catchphrases, images, viral videos and more. Such fads and sensations grow rapidly on the Internet because its instant communication facilitates word of mouth. In… …   Wikipedia